Effective Date: August 2026
Last Reviewed: August 2026
Ethical Hacker Hire (“Ethical Hacker Hire,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information provided through our website and services.
This Privacy Policy explains what information we may collect, how we use it, how we protect it, how long we retain it, and the choices and rights available to individuals.
This policy applies to information collected through ethicalhackerhire.com, our contact channels, and related business communications.
Information We Collect
We collect information that is reasonably necessary to operate our website, respond to inquiries, evaluate potential engagements, and provide authorized cybersecurity services.
Information You Provide
Depending on how you interact with us, this may include:
- Name
- Business or organization name
- Professional email address
- Phone number
- Information included in messages or consultation requests
- Information required to understand a proposed security engagement
- Contract, billing, or administrative information
Security Engagement Information
When discussing or conducting an authorized cybersecurity engagement, clients may provide technical information needed to define or perform the agreed work.
Depending on the engagement, this may include:
- Domain names
- IP addresses or network ranges
- Application endpoints
- System or device information
- Security configurations
- Vulnerability information
- Assessment evidence and reports
We use engagement information only as necessary for the authorized purposes defined by the applicable agreement and scope.
Automatically Collected Information
Our website may collect standard technical information such as:
- IP address
- Browser and device information
- Date and time of access
- Referring pages
- Pages requested
- Server and security logs
This information may be used to maintain website functionality, monitor security, investigate abuse, and protect our systems.
How We Use Information
We may use personal and business information to:
- Respond to inquiries and requests
- Evaluate potential cybersecurity engagements
- Define project scope and requirements
- Provide contracted services
- Communicate with clients
- Prepare and deliver security reports
- Maintain business and contractual records
- Protect our website and systems
- Detect and prevent abuse, fraud, or security incidents
- Meet applicable legal or contractual obligations
- Improve our website and services where appropriate
We do not use client assessment information for unrelated purposes without appropriate authorization.
Cybersecurity Confidentiality
Cybersecurity engagements can involve highly sensitive information about an organization’s systems, applications, vulnerabilities, configurations, and security controls.
We therefore treat client engagement information as confidential and handle it according to the applicable engagement terms, contracts, and security procedures.
Where applicable, confidentiality obligations may be established through a Non-Disclosure Agreement (NDA) and Statement of Work (SOW).
Security testing itself is conducted only within the scope and authorization established for the engagement.
How We Protect Information
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information we handle.
Depending on the type of information and engagement, safeguards may include access controls, secure communications, encryption, restricted access, and secure storage.
No method of transmitting or storing information can be guaranteed to be completely secure. However, we take reasonable steps to protect information against unauthorized access, loss, misuse, or disclosure.
Important: Any specific technical controls such as PGP, TLS 1.3, isolated encrypted volumes, or other infrastructure should be listed here only if they are actually implemented and maintained by the company.
Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, contractual requirements, legitimate business needs, security purposes, or applicable legal obligations.
Retention periods may differ depending on the type of information.
For cybersecurity engagements, retention requirements may also be defined by the applicable contract or Statement of Work.
Where information is no longer required and there is no legal, contractual, or legitimate business reason to retain it, it may be securely deleted or otherwise disposed of.
Information Sharing
We do not sell or rent personal information.
We may disclose information when reasonably necessary to:
- Provide requested services
- Operate our website or business
- Use service providers acting on our behalf
- Meet contractual obligations
- Comply with applicable law or legal process
- Protect our rights, property, systems, or users
- Investigate security incidents or suspected abuse
Where third-party service providers process personal information on our behalf, their access should be limited to the information and purposes necessary for the relevant service.
Cookies and Website Technologies
Our website may use cookies or similar technologies for essential functionality, security, analytics, or other purposes.
The types of cookies and technologies used may change as website functionality changes.
Where consent is required by applicable law, appropriate consent mechanisms should be provided before placing non-essential cookies or similar technologies.
Your Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights regarding your personal information.
These may include rights to:
- Access personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request information about how personal information is collected and used
- Object to or restrict certain processing
- Request data portability where applicable
- Withdraw consent where processing is based on consent
- Opt out of certain sale or sharing activities where applicable
- Exercise applicable privacy rights without unlawful discrimination
Under California privacy law, applicable consumers may have rights including the right to know, delete, correct, opt out of certain sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment for exercising applicable rights. The precise rights and exceptions depend on whether the CCPA applies to the business and the individual.
Under the GDPR, applicable individuals may have rights including access, rectification, erasure, restriction, portability, objection, and rights concerning certain automated decision-making.
How to Submit a Privacy Request
To submit a privacy-related request, contact our privacy team using the contact information provided below.
Please include enough information for us to understand and process your request.
Where required by applicable law, we may need to verify your identity before completing certain requests.
We will handle valid privacy requests within the timeframes required by applicable law.
International Data Transfers
Depending on where our users, clients, service providers, and business operations are located, personal information may be processed or stored in countries other than the country in which it was originally collected.
Where applicable privacy laws impose requirements on international transfers, appropriate safeguards should be used.
Data Breach and Security Incidents
If we become aware of a security incident involving personal information, we will assess the incident and take appropriate steps in accordance with applicable legal, contractual, and regulatory requirements.
Where notification is legally required, affected individuals or authorities will be notified within the applicable timeframe.
Children’s Privacy
Our website and services are intended for businesses, professionals, and other users who are legally able to engage with our services.
We do not knowingly collect personal information from children where prohibited by applicable law.
If you believe that a child has provided personal information to us, please contact us so that the information can be reviewed and, where appropriate, removed.
Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, security, or content of third-party websites. We encourage users to review the privacy policies of external websites before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy when our services, website, data practices, or applicable legal requirements change.
When we make material changes, we may update the Effective Date or Last Reviewed date shown at the beginning of this policy.
We encourage visitors to review this page periodically for the latest information about our privacy practices.
Contact Us
If you have questions about this Privacy Policy, how we handle personal information, or how to exercise an applicable privacy right, please contact Ethical Hacker Hire through our designated privacy contact channel.
Ethical Hacker Hire
Privacy & Data Protection Team